CVE-2026-25267

High

Description

Memory corruption when non-secure loader rewrites page tables before secure memory initialization.

SeverityHigh
CVSS7.8
Exploit probability—
ProductQualcomm Qca6698au Firmware
PublishedOct 6, 2026
First seenOct 6, 2026

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm qca6698au_firmwareNo range specified—
qualcomm qca6797aq_firmwareNo range specified—
qualcomm qcc710_firmwareNo range specified—
qualcomm qcm2290_firmwareNo range specified—
qualcomm qcm4290_firmwareNo range specified—
qualcomm qcm4325_firmwareNo range specified—
qualcomm qcm4490_firmwareNo range specified—
qualcomm qcm5430_firmwareNo range specified—
qualcomm qcm6125_firmwareNo range specified—
qualcomm qcm6490_firmwareNo range specified—
qualcomm qcn9011_firmwareNo range specified—
qualcomm qcn9012_firmwareNo range specified—
qualcomm qcs2290_firmwareNo range specified—
qualcomm qcs4290_firmwareNo range specified—
qualcomm qcs4490_firmwareNo range specified—
qualcomm qcs8550_firmwareNo range specified—
qualcomm qts110_firmwareNo range specified—
qualcomm video_collaboration_vc1_platform_firmwareNo range specified—
qualcomm video_collaboration_vc3_platform_firmwareNo range specified—
qualcomm video_collaboration_vc5_platform_firmwareNo range specified—
qualcomm robotics_rb2_platform_firmwareNo range specified—
qualcomm robotics_rb5_platform_firmwareNo range specified—
qualcomm sa2150p_firmwareNo range specified—
qualcomm sa4150p_firmwareNo range specified—
qualcomm sa4155p_firmwareNo range specified—
qualcomm sa6145p_firmwareNo range specified—
qualcomm sa6150p_firmwareNo range specified—
qualcomm sa6155_firmwareNo range specified—
qualcomm sa6155p_firmwareNo range specified—
qualcomm sa8145p_firmwareNo range specified—
qualcomm sa8150p_firmwareNo range specified—
qualcomm sa8155_firmwareNo range specified—
qualcomm sa8155p_firmwareNo range specified—
qualcomm sa8195p_firmwareNo range specified—
qualcomm sc8380xp_firmwareNo range specified—
qualcomm snapdragon_8_gen1_5g_firmwareNo range specified—
qualcomm snapdragon_662_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_865_5g_mobile_platform_firmwareNo range specified—
qualcomm sm6225p_firmwareNo range specified—
qualcomm sm6250_firmwareNo range specified—
qualcomm snapdragon_g1_gen_2_gaming_platform_firmwareNo range specified—
qualcomm 5g_fixed_wireless_access_platform_firmwareNo range specified—
qualcomm 9205_lte_modem_firmwareNo range specified—
qualcomm 9205s_modem_firmwareNo range specified—
qualcomm aqt1000_firmwareNo range specified—
qualcomm ar8031_firmwareNo range specified—
qualcomm c-v2x_9150_firmwareNo range specified—
qualcomm csra6620_firmwareNo range specified—
qualcomm csra6640_firmwareNo range specified—
qualcomm csrb31024_firmwareNo range specified—
qualcomm fastconnect_6200_firmwareNo range specified—
qualcomm fastconnect_6700_firmwareNo range specified—
qualcomm fastconnect_6800_firmwareNo range specified—
qualcomm fastconnect_6900_firmwareNo range specified—
qualcomm fastconnect_7800_firmwareNo range specified—
qualcomm flight_rb5_5g_platform_firmwareNo range specified—
qualcomm fsm100_platform_firmwareNo range specified—
qualcomm g1_gen_1_firmwareNo range specified—
qualcomm g2_gen_1_firmwareNo range specified—
qualcomm g3x_gen_2_firmwareNo range specified—
qualcomm iq-615_firmwareNo range specified—
qualcomm iq-8275_firmwareNo range specified—
qualcomm iq-9075_firmwareNo range specified—
qualcomm iqx5121_firmwareNo range specified—
qualcomm iqx7181_firmwareNo range specified—
qualcomm mbm415_firmwareNo range specified—
qualcomm monaco_iot_firmwareNo range specified—
qualcomm netrani_firmwareNo range specified—
qualcomm qca0000_firmwareNo range specified—
qualcomm qca2066_firmwareNo range specified—
qualcomm qca4004_firmwareNo range specified—
qualcomm qca6391_firmwareNo range specified—
qualcomm qca6420_firmwareNo range specified—
qualcomm qca6430_firmwareNo range specified—
qualcomm qca6564_firmwareNo range specified—
qualcomm qca6564a_firmwareNo range specified—
qualcomm qca6564au_firmwareNo range specified—
qualcomm qca6574_firmwareNo range specified—
qualcomm qca6574a_firmwareNo range specified—
qualcomm qca6574au_firmwareNo range specified—
qualcomm qca6595_firmwareNo range specified—
qualcomm qca6595au_firmwareNo range specified—
qualcomm qca6688aq_firmwareNo range specified—
qualcomm qca6696_firmwareNo range specified—
qualcomm qca6698aq_firmwareNo range specified—
qualcomm wsa8845h_firmwareNo range specified—
qualcomm sm6450p_firmwareNo range specified—
qualcomm sm6475p_firmwareNo range specified—
qualcomm sm6475q_firmwareNo range specified—
qualcomm sm7325p_firmwareNo range specified—
qualcomm sm7435_firmwareNo range specified—
qualcomm sm7435p_firmwareNo range specified—
qualcomm sm7525_firmwareNo range specified—
qualcomm sm7550_firmwareNo range specified—
qualcomm sm7550p_firmwareNo range specified—
qualcomm sm7635p_firmwareNo range specified—
qualcomm sm8475p_firmwareNo range specified—
qualcomm sm8550p_firmwareNo range specified—
qualcomm smart_audio_400_platform_firmwareNo range specified—
qualcomm snapdragon_4_gen_1_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_4_gen_2_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_460_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_480_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_480\+_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_6_gen_1_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_6_gen_3_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_680_4g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_685_4g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_695_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_7_gen_1_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_7\+_gen_2_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_778g_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_778g\+_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_782g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_7c_compute_platform_firmwareNo range specified—
qualcomm snapdragon_7c_gen_2_compute_platform_firmwareNo range specified—
qualcomm snapdragon_7c\+_gen_3_compute_firmwareNo range specified—
qualcomm snapdragon_8_gen_1_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_8_gen_2_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_8\+_gen_1_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_8\+_gen_2_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_865\+_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_870_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_888_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_888\+_5g_mobile_platform_firmwareNo range specified—
qualcomm snapdragon_8c_compute_platform_firmwareNo range specified—
qualcomm snapdragon_8c_compute_platform_\(sc8180xp-ad\)_firmwareNo range specified—
qualcomm snapdragon_8cx_compute_platform_firmwareNo range specified—
qualcomm snapdragon_8cx_compute_platform_\"poipu_pro\"_firmwareNo range specified—
qualcomm snapdragon_8cx_gen_2_5g_compute_platform_firmwareNo range specified—
qualcomm snapdragon_8cx_gen_2_5g_compute_platform_\"poipu_pro\"_firmwareNo range specified—
qualcomm snapdragon_auto_5g_modem-rf_firmwareNo range specified—
qualcomm snapdragon_wear_1300_platform_firmwareNo range specified—
qualcomm snapdragon_x53_5g_modem-rf_system_firmwareNo range specified—
qualcomm snapdragon_x55_5g_modem-rf_system_firmwareNo range specified—
qualcomm snapdragon_xr2_5g_platform_firmwareNo range specified—
qualcomm snapdragon_xr2\+_gen_1_platform_firmwareNo range specified—
qualcomm snapdragon_auto_4g_modem_firmwareNo range specified—
qualcomm vision_intelligence_400_platform_firmwareNo range specified—
qualcomm wcd9306_firmwareNo range specified—
qualcomm wcd9335_firmwareNo range specified—
qualcomm wcd9340_firmwareNo range specified—
qualcomm wcd9341_firmwareNo range specified—
qualcomm wcd9360_firmwareNo range specified—
qualcomm wcd9370_firmwareNo range specified—
qualcomm wcd9371_firmwareNo range specified—
qualcomm wcd9375_firmwareNo range specified—
qualcomm wcd9378_firmwareNo range specified—
qualcomm wcd9380_firmwareNo range specified—
qualcomm wcd9385_firmwareNo range specified—
qualcomm wcd9390_firmwareNo range specified—
qualcomm wcd9395_firmwareNo range specified—
qualcomm wcn3910_firmwareNo range specified—
qualcomm wcn3950_firmwareNo range specified—
qualcomm wcn3980_firmwareNo range specified—
qualcomm wcn3988_firmwareNo range specified—
qualcomm wcn3990_firmwareNo range specified—
qualcomm wcn6650_firmwareNo range specified—
qualcomm wcn6755_firmwareNo range specified—
qualcomm wsa8810_firmwareNo range specified—
qualcomm wsa8815_firmwareNo range specified—
qualcomm wsa8830_firmwareNo range specified—
qualcomm wsa8832_firmwareNo range specified—
qualcomm wsa8835_firmwareNo range specified—
qualcomm wsa8840_firmwareNo range specified—
qualcomm wsa8845_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-25267 · Qualcomm Qca6698au Firmware · Dark Radar